Stopping Attacks
Here's a sample of my tcpdump.
14:45:12.370515 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:12.678535 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:12.837133 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:13.036056 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:13.374049 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:13.533041 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:13.761696 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:14.069554 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:14.291607 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:14.487016 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:14.735454 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:14.983802 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:15.152703 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:15.464335 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:15.649810 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:15.851817 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:16.186256 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:16.348919 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:16.574030 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:16.862070 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:17.073906 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:17.243046 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:17.531066 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:17.716539 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:17.945877 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:18.246396 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:18.432159 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:18.630773 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:18.949076 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:19.134541 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:19.303759 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:19.674293 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:19.833489 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
14:45:20.028856 adsl-66.51.196.47.dslextreme.com.6970 > lashoppingcenter.com.23970: udp 620
I get these attacks(and several other types) just about everyday. If my provider charges me for all this, I'm gonna go broke soon. Anyone have any ideas on how to stop them at the server level?
I tried the /sbin/route command to reject all ip's associated, but no luck.
Any help would greatly be appreciated
